SecurityBleepingComputerabout 1 hour ago
Spirals ransomware encrypts in under 24 hours
1 min read
A new ransomware actor called Spirals completed a corporate intrusion in under 24 hours, breaching an IT services firm in South Asia via an exposed IIS server. The Rust-based ransomware uses AES-128 keys protected by ECDH P-256 and intermittent encryption for files over 5MB. A ransom note named RECOVERY_SECTION.log is dropped on the C: drive.
Level
Hype check
Tap to vote and see what everyone thinks.
